Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Explorer.exe application error 0xc000005

Irishka

Posted 11 September 2011 - 09:16 AM

Irishka

Member

Member

11 posts

Hi, I'm experiencing the same problem as described in this topic: http://www.geekstogo...00005-resolved/, i.e. I got the above error (explorer application error 0xc000005) right after logging. It came up twice and then I got nothing, no desktop icons, no toolbar at the bottom, the windows button didn't work. The only thing I could do was access some programs through the task manager.

This happened after I installed FlashGet3 from flashget.com, then found out it was in Chinese and it added a few lines in Chinese to the right click context menu, which was quite annoying. When trying to uninstall it through "Add/remove program" tool I got an advice from avast! to run the removal process in sandbox. But for some reason it wouldn't remove it properly in sandbox mode, so I ran the removal process again in a regular mode. This didn't help to remove Chinese lines from right click menu though, so then I downloaded and installed some other software (sorry, not able to check the name of it as I have no access to the desktop) supposed to help me editing it, but it didn't really work. And then the higher described error 0xc000005 came.

OTL log attached below. Let me know if you need any additional logs or other data. Thanks for any help!

P.S. I've noticed from other threads that you often need an OTL log after scanning under All Users, so I attached it below, too, just in case.

Attached Files

Advertisements

Render

Posted 11 September 2011 - 09:50 AM

Render

Trusted Helper

Malware Removal

4,195 posts

Hi and welcome to GeeksToGo! Please make sure you read all of the instructions and fixes thoroughly before continuing with them. If you have any queries or you are unsure about anything, just say and I'll help you out

Files\Folders moved on Reboot...File\Folder C:\Documents and Settings\NetworkService\Local Settings\Temp\Perflib_Perfdata_324.dat not found!File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Render

Posted 11 September 2011 - 05:04 PM

OK. We will try with system restore now. Please follow the steps below:

Open Task Manager and click on New Task...

In Create New Task window type in the following:

%SystemRoot%\system32\restore\rstrui.exe

Click OK button.

System Restore window should open.

On the Welcome to System Restore page, click to select the Restore my computer to an earlier time option, and then click Next.

On the Select a Restore Point page, click the most recent system restore point in the On this list, click a restore point list, and then click Next.Note: A System Restore message may appear that lists configuration changes that System Restore will make. Click OK.

On the Confirm Restore Point Selection page, click Next. System Restore restores the previous Windows XP configuration, and then restarts the computer.

Irishka

Posted 12 September 2011 - 01:50 PM

Irishka

Member

Topic Starter

Member

11 posts

Hi Render! My apologizes for the late reply.

The problem is that the infected computer is an HP laptop that's got preinstalled recovery software (Roxio) due to which Windows System Restore was disabled. However I tried the steps you described, there were indeed 2 restore points, but they both were created (by OTL I suppose) after the computer got infected. I restored from the most recent point, but nothing changed. Then I ran that Roxio restore application, there were 2 points (Aug 31 and Sep 7, maybe there were older points, too, I didn't check). I selected Aug 31, because on Sep 7 the computer was already infected, but again, the restoration didn't bring any progress.

Irishka

Posted 16 September 2011 - 03:31 AM

Irishka

Member

Topic Starter

Member

11 posts

Hi Render, just wanted to say that I got problemes with my other computer, too. Not sure if it was connected to the issue with the laptop or not, anyway I managed to fix it and with try to follow tonight the last procedure you mentioned. Sorry for the delay, and thanks once again for your help. I'll post new aswMBR.exe log in the evening.